Send documentation comments to mdsfeedback-doc@cisco.com
41-2
Cisco MDS 9000 Family Fabric Manager Configuration Guide
OL-17256-03, Cisco MDS NX-OS Release 4.x
Chapter 41 Configuring RADIUS and TACACS+
Switch AAA
Fabric Manager Security Options
You can access Fabric Manager using the console (serial connection), Telnet, or Secure Shell (SSH). For
each management path (console, Telnet, and SSH), you can configure one or more of the following
security control options: local, remote (RADIUS or TACACS+), or none.
• Remote security control
–
Using RADIUS. See the “Configuring RADIUS Server Monitoring Parameters” section on
page 41-7.
–
Using TACACS+. See the “Configuring TACACS+ Server Monitoring Parameters” section on
page 41-14.
• Local security control. See the “Local AAA Services” section on page 41-26.
These security features can also be configured for the following scenarios:
• iSCSI authentication (see the “iSCSI Authentication Setup Guidelines and Scenarios” section on
page 50-56).
• Fibre Channel Security Protocol (FC-SP) authentication (see Chapter 45, “Configuring FC-SP and
DHCHAP”)
SNMP Security Options
The SNMP agent supports security features for SNMPv1, SNMPv2c, and SNMPv3. Normal SNMP
security features apply to all applications that use SNMP (for example, Cisco MDS 9000 Fabric
Manager).
SNMP security options also apply to the Fabric Manager and Device Manager.
See Chapter 40, “Configuring SNMP”.
Switch AAA
Using the CLI or Fabric Manager, you can configure AAA switch functionalities on any switch in the
Cisco MDS 9000 Family.
This section includes the following topics:
• Authentication, page 41-3
• Authorization, page 41-3
• Accounting, page 41-3
• Remote AAA Services, page 41-4
• Remote Authentication Guidelines, page 41-4
• Server Groups, page 41-4
• AAA Configuration Options, page 41-4
• Authentication and Authorization Process, page 41-6
To Next Page
Loading...
Need help?
General
